const serverAddress = 'sftp.thirdparty.com:22';
const folderPath = 'reports/daily';
const fileName = 'reservations.xml';

const params = new URLSearchParams({
  filter: 'GBT',
  ref: 'import-2024-01',
  timeout: '30'
});

const response = await fetch(
  `https://service.pcibooking.net/api/sftp/${serverAddress}/${folderPath}/${fileName}?${params}`,
  {
    headers: {
      'Authorization': 'Basic dXNlcm5hbWU6cGFzc3dvcmQ='  // SFTP server credentials
    }
  }
);

const tokenUri = response.headers.get('X-pciBooking-cardUri');
console.log('Token URI:', tokenUri);

const data = await response.text();
console.log('Sanitized file content:', data);

import requests

server_address = 'sftp.thirdparty.com:22'
folder_path = 'reports/daily'
file_name = 'reservations.xml'

response = requests.get(
    f'https://service.pcibooking.net/api/sftp/{server_address}/{folder_path}/{file_name}',
    params={
        'filter': 'GBT',
        'ref': 'import-2024-01',
        'timeout': '30'
    },
    headers={
        'Authorization': 'Basic dXNlcm5hbWU6cGFzc3dvcmQ='  # SFTP server credentials
    }
)

token_uri = response.headers.get('X-pciBooking-cardUri')
print('Token URI:', token_uri)
print('Sanitized file content:', response.text)

The file content is returned with card details replaced by token placeholders.
The X-pciBooking-cardUri header contains the token URI(s).

{
    "code": -125,
    "message": "Bad input data",
    "moreInfo": "...",
    "errorList": null
}

Empty response body.
Authentication failed: the API key, session token or access token is missing or was not accepted.
See "Authentication and Permission Failures" on the Error Handling page.